Bug ID 702151: HTTP/2 can garble large headers

Last Modified: Oct 07, 2023

Affected Product(s):
BIG-IP LTM(all modules)

Known Affected Versions:
11.6.0, 11.6.1, 11.6.2, 11.6.3, 11.6.3.1, 11.6.3.2, 12.0.0, 12.0.0 HF1, 12.1.0 HF1, 12.0.0 HF2, 12.1.0 HF2, 12.0.0 HF3, 12.0.0 HF4, 12.1.1 HF1, 12.1.1 HF2, 12.1.2 HF1, 12.1.2 HF2, 12.1.0, 12.1.1, 12.1.2, 12.1.3, 12.1.3.1, 12.1.3.2, 12.1.3.3, 12.1.3.4, 12.1.3.5, 13.0.0, 13.0.0 HF1, 13.0.0 HF2, 13.0.0 HF3, 13.0.1, 13.1.0.1, 13.1.0.2, 13.1.0.3, 13.1.0.4, 13.1.0.5, 13.1.0.6, 13.1.0.7

Fixed In:
14.1.0, 14.0.0, 13.1.0.8, 12.1.3.6, 11.6.3.3

Opened: Jan 16, 2018

Severity: 3-Major

Symptoms

The HTTP/2 filter may incorrectly encode large headers.

Impact

The garbled header may no longer conform to the HPACK spec, and cause the connection to be dropped. The garbled header may be correctly formed, but contain incorrect data.

Conditions

A header that encodes to larger than 2048 bytes may be incorrectly encoded.

Workaround

None

Fix Information

The HTTP/2 filter correctly encodes large HTTP headers.

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips